CVE-2025-22078: staging: vchiq_arm: Fix possible NPR of keep-alive thread
In the Linux kernel, the following vulnerability has been resolved:
staging: vchiqarm: Fix possible NPR of keep-alive thread
In case vchiqplatformconnstatechanged() is never called or fails before driver removal, kathread won't be a valid pointer to a taskstruct. So do the necessary checks before calling kthreadstop to avoid a crash.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22078?
CVE-2025-22078 has been classified as a moderate severity vulnerability in the Linux kernel.
How does CVE-2025-22078 affect the Linux kernel?
CVE-2025-22078 affects the Linux kernel by potentially leading to a null pointer dereference in the keep-alive thread.
How do I fix CVE-2025-22078?
To fix CVE-2025-22078, update your Linux kernel to the latest patched version provided by the distribution.
Which versions of Linux kernel are affected by CVE-2025-22078?
CVE-2025-22078 affects specific versions of the Linux kernel that do not contain the fix for the vulnerability.
Is CVE-2025-22078 publicly known?
Yes, CVE-2025-22078 is a publicly disclosed vulnerability affecting the Linux kernel.